This release presents a strong overall dependency-health profile: it is actively developed, not deprecated or archived, has a matching and transparent source repository, includes tests, changelog, licensing, security documentation, and build/security tooling, and has no install-time lifecycle scripts. The main reservations are that the project is very young at 35 days, has only six releases, has minimal adoption signals, and is maintained by a small individual-led contributor base, although two contributors are active and commit activity is substantial. It appears reasonable to depend on with normal review of a young package's future compatibility and maintenance trajectory.
82%
Total Score
80
100
89
90
Only one registry account has publish access, which creates publishing continuity risk, though the repository's recent activity shows a second active contributor and partly compensates for the narrow registry maintainer list.
The repository is owned by an individual account rather than an organization, so there is no organizational succession cushion; recent two-person commit activity partially offsets this concern.
Six releases in 35 days with a median interval of about 2.8 days shows active iteration, but the short project history means long-term maintenance is not yet established.
The repository has only 1 star, 0 forks, and 0 watchers, so external adoption and community validation are minimal; this is a caution for maturity but not decisive for a young package.
Four workflows use read-only permissions, while one code-style workflow has top-level write permission; the write-enabled workflow is a mild hardening concern but not inherently unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
inertiajs/inertia-laravel Version ^2.0|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.